Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File:                     97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier:          sUJXYfpJJrIsljxqovKmEQFLKKF1tOKBag/P2Z50jRo=
Subject key identifier:   68:64:50:A7:2E:08:CB:18:00:34:EC:2D:E0:6E:DF:48:18:F6:83:E4
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer:       /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial:       01A088D514A3817B9D1301C1CBAFBE14BCDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number:          073C
Signing time:             Thu 10 Sep 2026 01:01:00 +0000
Manifest this update:     Thu 10 Sep 2026 01:01:00 +0000
Manifest next update:     Fri 11 Sep 2026 01:01:00 +0000
Files and hashes:         1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: ErfeNeFcVfwvRHhjPzb83MX5mtLk/iJ5XZXPZsH5JwY=)
                          2: xhl0o4V6-hvD85CUbuSTASM7Pe8.roa (hash: UOzsj8ZtwxxJK1k4oeGehyFJR/EivykYvRbt7Q6K/PA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:d5:14:a3:81:7b:9d:13:01:c1:cb:af:be:14:bc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
        Validity
            Not Before: Sep 10 01:01:00 2026 GMT
            Not After : Sep 11 01:01:00 2026 GMT
        Subject: CN=686450a72e08cb180034ec2de06edf4818f683e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:cc:a3:ef:61:d6:97:04:1c:1c:dd:eb:bf:
                    6f:e8:1e:eb:41:12:9d:73:64:bc:d4:81:6c:f2:98:
                    71:df:48:25:e5:8a:16:2f:be:95:9a:f5:fd:27:59:
                    28:99:15:35:43:63:f5:ef:05:49:c1:84:60:27:33:
                    9b:01:f5:c7:7d:78:bb:90:74:d1:f7:8c:55:aa:22:
                    22:b9:0d:92:11:08:e3:30:86:6e:99:21:52:5d:e7:
                    d1:82:f1:3c:e4:7e:5f:17:a3:22:3b:b3:65:cb:3f:
                    b3:a3:4d:fd:d0:07:dc:f0:89:7b:d7:1a:38:c0:9c:
                    f7:ec:06:ea:59:37:08:bf:be:6c:c1:07:55:ec:4a:
                    e1:25:48:a8:3a:3c:ac:55:e4:31:a9:97:26:21:73:
                    25:19:ea:d5:bc:8a:43:d1:e8:a3:0b:74:2b:d8:9d:
                    e3:34:73:d4:48:08:57:b6:e7:e5:ef:e7:c4:2e:22:
                    de:37:94:45:26:27:41:ac:5a:47:a6:1c:17:c9:39:
                    4c:1f:1b:86:df:e7:cd:e4:df:97:b1:75:44:58:42:
                    f8:41:e5:ba:a0:b0:90:a2:eb:cb:96:28:9c:07:1c:
                    fc:5f:d7:fb:7d:34:25:b8:3c:d8:c0:ee:cb:db:7c:
                    23:77:a9:6c:3f:d7:9b:f7:ec:41:dd:87:cb:c6:a3:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:64:50:A7:2E:08:CB:18:00:34:EC:2D:E0:6E:DF:48:18:F6:83:E4
            X509v3 Authority Key Identifier:
                keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:61:59:69:b7:fd:14:e1:e3:85:a3:18:e8:c5:c2:1a:ef:
         30:92:94:b9:3b:f0:17:57:7a:bd:7f:3f:ad:f6:77:e6:00:9f:
         56:88:f5:ad:f2:08:58:b7:e7:b3:41:de:3c:14:d0:ff:bf:34:
         4d:ba:33:bf:ab:17:eb:b0:c7:d7:6b:4b:8b:56:54:7f:93:fa:
         6b:37:b7:f9:a4:41:3d:82:bd:13:a9:3e:d5:63:1b:80:29:22:
         3b:3c:01:89:15:8e:2b:8a:30:67:09:cd:70:a7:57:2b:2b:45:
         fa:9c:f5:b2:d1:31:48:78:77:2a:cd:48:c0:64:9e:0c:58:f8:
         dc:00:d9:7d:63:8d:5d:d3:e3:99:b4:42:e4:67:4e:3e:aa:aa:
         a1:70:81:76:eb:2e:65:72:3e:43:e5:8b:a4:62:ae:3e:61:ad:
         cc:9d:d5:04:a8:3e:46:f6:1f:06:ee:8b:ba:85:63:9b:fe:ab:
         5a:02:63:e5:30:2c:b1:3f:20:78:b5:65:f9:01:86:91:f8:b3:
         8c:05:ed:02:d6:ea:8f:3f:3c:0e:01:2b:b3:83:89:0e:7e:38:
         12:dc:f0:75:20:6a:a5:97:9b:70:fe:b1:97:b7:13:c5:31:6b:
         58:fe:99:2d:53:b5:30:14:38:f5:72:bd:66:27:eb:c8:94:98:
         f0:50:14:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCI1RSjgXudEwHBy6++FLzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjA2OWQzM2RmMTIyNWE4YjM2NDNhMDEzNjRmMjc5ZGY0
MGQ4NzcwHhcNMjYwOTEwMDEwMTAwWhcNMjYwOTExMDEwMTAwWjAzMTEwLwYDVQQD
Eyg2ODY0NTBhNzJlMDhjYjE4MDAzNGVjMmRlMDZlZGY0ODE4ZjY4M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyPMo+9h1pcEHBzd679v6B7rQRKd
c2S81IFs8phx30gl5YoWL76VmvX9J1komRU1Q2P17wVJwYRgJzObAfXHfXi7kHTR
94xVqiIiuQ2SEQjjMIZumSFSXefRgvE85H5fF6MiO7Nlyz+zo0390Afc8Il71xo4
wJz37AbqWTcIv75swQdV7ErhJUioOjysVeQxqZcmIXMlGerVvIpD0eijC3Qr2J3j
NHPUSAhXtufl7+fELiLeN5RFJidBrFpHphwXyTlMHxuG3+fN5N+XsXVEWEL4QeW6
oLCQouvLliicBxz8X9f7fTQluDzYwO7L23wjd6lsP9eb9+xB3YfLxqOsJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhkUKcuCMsYADTsLeBu30gY9oPkMB8GA1UdIwQY
MBaAFPewadM98SJaizZDoBNk8nnfQNh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMt
NWZkY2I3ODNhNmVjLzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMtNWZkY2I3ODNhNmVj
LzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWy1hWWm3
/RTh44WjGOjFwhrvMJKUuTvwF1d6vX8/rfZ35gCfVoj1rfIIWLfns0HePBTQ/780
Tbozv6sX67DH12tLi1ZUf5P6aze3+aRBPYK9E6k+1WMbgCkiOzwBiRWOK4owZwnN
cKdXKytF+pz1stExSHh3Ks1IwGSeDFj43ADZfWONXdPjmbRC5GdOPqqqoXCBdusu
ZXI+Q+WLpGKuPmGtzJ3VBKg+RvYfBu6LuoVjm/6rWgJj5TAssT8geLVl+QGGkfiz
jAXtAtbqjz88DgErs4OJDn44EtzwdSBqpZebcP6xl7cTxTFrWP6ZLVO1MBQ49XK9
ZifryJSY8FAUUA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:47:42 2026 by rpki-client